[Release] Shaiya PHP website (CMS)

Page 3 of 6

10/27/2015 22:04 SugarD-x#31

Quote:

Originally Posted by Big_

i edited his login to be adapted to have MD5 Hash+Salt because thats how my users passwords are stored for in game it is verry easly done

Awesome, thank you! I wasn't sure if I was going to have to do this myself or not, hence the question. Thanks for the info!

11/02/2015 21:27 Big_#32

Hmm still no new releace =(

11/02/2015 21:29 SugarD-x#33

Quote:

Originally Posted by Big_

Hmm still no new releace =(

When I got a new reply notification to this topic, I got really excited thinking the new version was out. Damn you! :D

In all seriousness, I can't wait for the next version either!

11/03/2015 07:50 Big_#34

yeah haha its a nice base to go from and can be customized verry easy i to and quite intested in the next releace here you go sugar here is the login.php that i edited to have MD5 user password and Salt

Spoiler

Code:

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>

<?php 

    include("../../config/config.php");
    include("../../config/functions.php");

    $supplied_username = isset($_POST["pseudo"]) ? mssql_escape_string(trim($_POST["pseudo"])) : '';
    $supplied_password = isset($_POST["pass"]) ? mssql_escape_string(trim($_POST["pass"])) : '';
    $checkremember = isset($_POST["remember_me"]) ? mssql_escape_string(trim($_POST["remember_me"])) : '';

    $query_string = "SELECT * FROM PS_UserData.dbo.Users_Master WHERE UserID='$supplied_username'";
    $result = odbc_exec($dbConn, $query_string);

    // Odbc_num_row is counting table row
    $count = odbc_num_rows($result);

    // If result matched $myusername and $mypassword, table row must be 1 row
    if ($count == 1) {
        $row = odbc_fetch_row($result, 1);
        $password = odbc_result($result, 'Pw');
        $salt = odbc_result($result, 'salt');
        // hashes stored in DB are uppercase, but md5 function returns lowercase :(
        $encrypted_supplied_password = strtoupper(md5(strtoupper(md5($supplied_password) . md5($salt))));

        if ($encrypted_supplied_password == $password) {
            $UserUID = odbc_result($result, 'UserUID');
            
            if ($checkremember == true){
                // setcookie('legacy_autologin_usr',$supplied_username, time() + 3600 * 24 * 15);
                // setcookie('legacy_autologin_pw', $supplied_password, time() + 3600 * 24 * 15);
                // setcookie('legacy_autologin_uid', $UserUID, time() + 3600 * 24 * 15);
            }
            
            //  data were valid, store the UserUID (his/her numerical unique ID)
            session_start();
            
            $_SESSION['UserUID'] = $UserUID;
            $_SESSION['UserName'] = $supplied_username;
            

                
            //  update processing state
            echo('

    <div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
        <font color="green">Login Successful!</font>
        <br/>
        
    </div>'

            );
        }
        else {
            // Incorrect password
            echo('

    <div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
        <font color="red">
            Incorrect Password!
            <br/>
            <br/>
            <a href=#>R�initialiser son mot de passe</a>
            <br />
        </font>
    </div>

            ');
        }
    }
    else {
        // User not found
        echo ('

    <div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
        <font color="red">
            UserName ' . $supplied_username . ' Not Found
        </font>
    </div>

        ');
    }
?>

    <div id="compteur"></div>

    <script language="JavaScript">
        function t () {
            var compteur = document.getElementById('compteur');
            s = duree;
            m = 0;
            h = 0;

            if (s < 0) {
                compteur.innerHTML=(document.location.href="../../?p=member");
            }
            else {
                if (s > 59) {
                    m = Math.floor(s/60);
                    s = s - m * 60;
                }

                if (m > 59) {
                    h = Math.floor(m/60);
                    m = m - h * 60;
                }

                if (s < 10) {
                    s = "0" + s;
                }

                if (m < 10) {
                    m = "0" + m;
                }
                
                compteur.innerHTML = h + ":" + m + ":" + s;
            }

            duree = duree - 1;
            window.setTimeout(t, 999);
        }

        duree="3";
        t();
    </script>
</body>

11/03/2015 16:03 SugarD-x#35

Quote:

Originally Posted by Big_

Spoiler

Code:

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>

<?php 

    include("../../config/config.php");
    include("../../config/functions.php");

    $supplied_username = isset($_POST["pseudo"]) ? mssql_escape_string(trim($_POST["pseudo"])) : '';
    $supplied_password = isset($_POST["pass"]) ? mssql_escape_string(trim($_POST["pass"])) : '';
    $checkremember = isset($_POST["remember_me"]) ? mssql_escape_string(trim($_POST["remember_me"])) : '';

    $query_string = "SELECT * FROM PS_UserData.dbo.Users_Master WHERE UserID='$supplied_username'";
    $result = odbc_exec($dbConn, $query_string);

    // Odbc_num_row is counting table row
    $count = odbc_num_rows($result);

    // If result matched $myusername and $mypassword, table row must be 1 row
    if ($count == 1) {
        $row = odbc_fetch_row($result, 1);
        $password = odbc_result($result, 'Pw');
        $salt = odbc_result($result, 'salt');
        // hashes stored in DB are uppercase, but md5 function returns lowercase :(
        $encrypted_supplied_password = strtoupper(md5(strtoupper(md5($supplied_password) . md5($salt))));

        if ($encrypted_supplied_password == $password) {
            $UserUID = odbc_result($result, 'UserUID');
            
            if ($checkremember == true){
                // setcookie('legacy_autologin_usr',$supplied_username, time() + 3600 * 24 * 15);
                // setcookie('legacy_autologin_pw', $supplied_password, time() + 3600 * 24 * 15);
                // setcookie('legacy_autologin_uid', $UserUID, time() + 3600 * 24 * 15);
            }
            
            //  data were valid, store the UserUID (his/her numerical unique ID)
            session_start();
            
            $_SESSION['UserUID'] = $UserUID;
            $_SESSION['UserName'] = $supplied_username;
            

                
            //  update processing state
            echo('

    <div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
        <font color="green">Login Successful!</font>
        <br/>
        
    </div>'

            );
        }
        else {
            // Incorrect password
            echo('

    <div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
        <font color="red">
            Incorrect Password!
            <br/>
            <br/>
            <a href=#>R�initialiser son mot de passe</a>
            <br />
        </font>
    </div>

            ');
        }
    }
    else {
        // User not found
        echo ('

    <div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
        <font color="red">
            UserName ' . $supplied_username . ' Not Found
        </font>
    </div>

        ');
    }
?>

    <div id="compteur"></div>

    <script language="JavaScript">
        function t () {
            var compteur = document.getElementById('compteur');
            s = duree;
            m = 0;
            h = 0;

            if (s < 0) {
                compteur.innerHTML=(document.location.href="../../?p=member");
            }
            else {
                if (s > 59) {
                    m = Math.floor(s/60);
                    s = s - m * 60;
                }

                if (m > 59) {
                    h = Math.floor(m/60);
                    m = m - h * 60;
                }

                if (s < 10) {
                    s = "0" + s;
                }

                if (m < 10) {
                    m = "0" + m;
                }
                
                compteur.innerHTML = h + ":" + m + ":" + s;
            }

            duree = duree - 1;
            window.setTimeout(t, 999);
        }

        duree="3";
        t();
    </script>
</body>

You rock! Thank you! I'll definitely be having fun playing with this code once 1.4.0 is out. Can never be too careful! :D

11/03/2015 23:28 Trayne01#36

I almost finished 1.4,
I'll upload it this week. also Thank you Big_ ;)

11/04/2015 00:55 SugarD-x#37

Awesome news! Can't wait! :D

11/08/2015 22:46 oasis1984#38

I would also suggest that you look into your SQL Injection protection in your functions.php as you use the ODBC drivers to connect to your database tables, so I am having an issue understanding why you're trying to use mssql_escape_string to secure your text input from form fields when them mssql drivers don't seem to be called anywhere.

From what I can tell, there's a bunch of stuff that's just thrown together, and although the overall design is nice, it still has a lot of updating that needs to be done before I'd consider it being a safe release. At this time, the SQL Injection prevention does not work, and wouldn't recommend using this template until the bugs are fixed.

~[Dev]Ash Artanis | Nexus Development Foundation

11/11/2015 21:09 Trayne01#39

Version 1.4.0 Removed!

Version 1.4.1 Uploaded :p

11/12/2015 00:12 SugarD-x#40

I seem to be getting errors trying to run "Procedure1.sql" and "Procedure2.sql". Are these still required, or were they accidentally carried over from an older version? If they are required, is there a specific database they need to be run under? I cannot find "dbo.usp_Read_Chars_Detail2_R" in any of them, hence my issue.
Edit: Disregard that. I found the issue! Seems my "PS_GameData" database was just being a pain.

____________________________

Also, "dbo.Users_Master.sql" contains a couple typos.

Code:

ALTER TABLE [PS_UserData].[dbo.].[Users_Master]
	ADD GM tinyint,
		GS tinyiny,
		MainCharName varchar(50)

Should be:

Code:

ALTER TABLE [PS_UserData].[dbo].[Users_Master]
	ADD GM tinyint,
		GS tinyint,
		MainCharName varchar(50)

Hope this helps! :D

Edit #2: I noticed this was missing from the instructions, but "<root>/<Language Version>/script/VoteHTTP_REFERER/db.php" also needs to have its database details changed, else the page returns an error about being unable to connect to the database.

Edit #3: "<root>/<Language Version>/script/Bless_odbc/bless.php" has a small typo on line 29.

Code:

<td style=\"width:340px;height:6px;\"><img src=\"../../img/bless//light.png\" style=\"width:".$row['GodBless_Light']."px; height:8px;\" /></td><div class='spacer'></div><td align='right' style=\"width:340px;height:6px;\"><img src=\"../../img/bless//dark.png\" style=\"width:".$row['GodBless_Dark']."px;height:9px;\" />

Should be:

Code:

<td style=\"width:340px;height:6px;\"><img src=\"../../img/bless/light.png\" style=\"width:".$row['GodBless_Light']."px; height:8px;\" /></td><div class='spacer'></div><td align='right' style=\"width:340px;height:6px;\"><img src=\"../../img/bless/dark.png\" style=\"width:".$row['GodBless_Dark']."px;height:9px;\" />

(The images contain extra forward slashes in their URL's)

____________________________

Loving your work man! Keep it up :)

11/12/2015 02:28 Big_#41

i just checked the FR version looks fine then you go to the US Version and there is missing stuff just heads up

11/12/2015 02:31 SugarD-x#42

Quote:

Originally Posted by Big_

i just checked the FR version looks fine then you go to the US Version and there is missing stuff just heads up

What is missing?

11/12/2015 03:35 Big_#43

well i only have quick look but the right and left panel was in not correct places and the midle news/main content box is not there but on the FR its fine

[Only registered and activated users can see links. Click Here To Register...]

11/12/2015 08:55 SkuulCandy#44

@sugar I think us version isn't fully completed bc trayne work on french version

11/12/2015 17:29 SugarD-x#45

Quote:

Originally Posted by Big_

well i only have quick look but the right and left panel was in not correct places and the midle news/main content box is not there but on the FR its fine

[Only registered and activated users can see links. Click Here To Register...]

I don't seem to have that issue with mine. Did you change anything in it, or try to upgrade on top of an older version? Mine was a clean install in an empty directory.

Quote:

Originally Posted by SkuulCandy

@sugar I think us version isn't fully completed bc trayne work on french version

The bugs I found were version-independent, with the exception of the image paths containing double-slashes in the English version, although that was probably carried over from another language version anyway. It seems most of the bugs are either small accidental typos, or bugs in existing scripts that he used from this website that the original authors never fixed, which is not his fault.

__________________________

As a side note, I would recommend in future releases to go through the various scripts' database configurations, and update them to read from your main configuration file using a variable or similar method. That way users only have to set the details once, rather than a dozen different times. Other than the bugs I mentioned previously, this is an epic release, and I absolutely love it. Awesome work man!

Page 3 of 6

Last »